Skip to content
Athemes vulnerabilities
Newest
-
athemes sydney
Sydney <= 2.56 - Missing Authorization to Authenticated (Subscriber+) Limited Theme Options Update
CVE-2025-8999
5.3 Medium
-
athemes addons for elementor, smub athemes addons for elementor +1 more
WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerability
CVE-2025-32158
7.5 High
-
athemes addons for elementor, smub athemes addons for elementor +1 more
WordPress aThemes Addons for Elementor plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-22646
6.5 Medium
-
athemes addons for elementor, smub athemes addons for elementor +1 more
aThemes Addons for Elementor <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13547
6.4 Medium
-
athemes addons for elementor, smub athemes addons for elementor +1 more
WordPress aThemes Addons for Elementor plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-51675
6.5 Medium
-
athemes starter sites, smub athemes starter sites +1 more
aThemes Starter Sites <= 1.0.53 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-6897
6.4 Medium
-
athemes sydney toolbox
Sydney Toolbox <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget
CVE-2024-4473
6.4 Medium
-
athemes sydney toolbox
Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4036
6.4 Medium
-
athemes sydney toolbox
Sydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
CVE-2024-3208
6.4 Medium
-
athemes sydney toolbox
Sydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id
CVE-2024-2936
6.4 Medium
-
athemes sydney toolbox
Sydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1447
6.4 Medium